CVEvulnerability

CVE-2007-6742

6.8 MEDIUM Published 2011-04-21 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2011-04-21
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.8 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:C
Weaknesses: CWE-399

Description

The get_filter_list function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote authenticated users to cause a denial of service (infinite loop) via a malformed search filter.

Affected configurations

• ibm tivoli directory server 5.2.0 • ibm tivoli directory server 5.2.0.4

Weakness · not in database (1)

CWE-399

References

http://www.ibm.com/support/docview.wss?uid=swg1IO07450 www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg24029663 Patch
http://www.ibm.com/support/docview.wss?uid=swg1IO07450 www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg24029663 Patch

CVE-2007-6742

Description

Affected configurations

Related

Weakness · not in database (1)

References